Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ef0w8J_dBH-0B6mEe0I3RvJXgoU.roa
File: ef0w8J_dBH-0B6mEe0I3RvJXgoU.roa (raw, json)
Hash identifier: crs4SRDACb6bMcc6X0+QFF6bXLC+hfFvWqwqlPqW7MQ=
Subject key identifier: 79:FD:30:F0:9F:DD:04:7F:B4:07:A9:84:7B:42:37:46:F2:57:82:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 018FF8F83713BDC8F0F135C00BAB28311DFB
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ef0w8J_dBH-0B6mEe0I3RvJXgoU.roa
Signing time: Sat 08 Jun 2024 17:49:27 +0000
ROA not before: Sat 08 Jun 2024 17:49:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 185.224.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f8:f8:37:13:bd:c8:f0:f1:35:c0:0b:ab:28:31:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jun 8 17:49:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79fd30f09fdd047fb407a9847b423746f2578285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:03:b5:8b:3c:10:55:f2:21:d2:ba:57:d7:
4b:05:5d:eb:8c:50:a7:04:2f:31:47:32:1e:3c:0d:
a7:c4:23:4b:5e:ca:09:dc:d3:52:f4:c7:b9:8b:49:
68:ee:7e:56:b1:a5:0f:c8:ac:af:58:ae:e2:9c:78:
9c:4a:8d:0d:98:d5:40:9b:eb:67:16:ab:53:03:1e:
bc:86:0a:84:34:aa:d5:33:4e:6d:54:9e:e2:12:68:
04:31:9a:67:c3:f0:26:1f:22:0a:40:10:7b:3f:d5:
b3:b4:c2:ec:0c:58:dd:36:47:6a:2e:cd:d1:25:29:
f7:88:d2:c6:42:4e:04:9d:42:e6:a8:fa:e5:a9:ac:
dc:a5:25:56:eb:43:24:45:9e:b4:e7:5a:8d:df:ff:
d0:d7:c2:48:60:fd:79:50:cb:47:09:60:fb:2e:65:
7f:6f:1f:e6:6c:ee:a0:3a:2f:62:19:ae:af:bc:c2:
4e:7b:3e:22:b4:12:75:e4:6e:75:c1:7a:8d:4e:d7:
b1:2e:c6:35:93:b8:b8:39:e2:bd:fe:ae:c5:aa:1e:
5c:13:1f:9c:2b:93:a9:51:45:9b:58:f3:a1:94:68:
63:02:29:4c:c8:75:43:49:b3:ce:cc:d9:27:74:e0:
b4:5a:a4:ac:58:ca:e3:f8:8f:43:d9:0d:39:15:9f:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FD:30:F0:9F:DD:04:7F:B4:07:A9:84:7B:42:37:46:F2:57:82:85
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ef0w8J_dBH-0B6mEe0I3RvJXgoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.3.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c8:18:55:d6:63:0e:36:28:6b:1e:61:6f:7e:af:37:f7:bd:
65:9b:15:91:45:c5:fa:40:46:97:a8:52:87:26:2d:e9:3e:3b:
1a:ae:d6:51:71:75:62:30:ff:ac:8d:5d:c5:77:a4:7e:72:98:
e0:03:fb:19:79:28:76:45:9d:33:c0:48:02:e5:09:84:e6:ed:
e6:da:c5:60:6d:9c:22:96:6a:16:ec:88:23:63:06:cb:2a:9b:
4c:5f:0d:a2:50:72:03:64:5a:34:1f:72:c0:ae:29:58:3d:9a:
ee:5b:e3:db:12:a3:c2:17:97:ae:ea:b0:e6:9f:66:7c:08:ed:
34:0e:92:09:ca:65:f5:56:6d:c0:68:7e:84:a9:a7:26:89:db:
d2:43:6e:a9:46:a8:b7:51:6c:60:e3:2b:e9:b9:91:71:18:00:
be:1d:53:80:e6:34:76:04:7e:53:02:04:5d:da:3a:35:94:22:
b7:74:b3:8b:2f:00:95:88:a6:8e:a8:b9:54:59:a6:e1:4e:4f:
76:52:8c:14:f2:8c:45:bd:71:6a:24:f4:87:51:47:21:b4:66:
47:1d:dd:f6:5e:60:fe:2e:af:94:91:e3:99:ae:8b:60:8e:6b:
cd:80:c3:fd:de:ff:39:b7:97:a7:be:3b:99:20:44:24:eb:d8:
bc:06:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:09 2025 by rpki-client